[SM-USERS] question about php session permissions

[Erwin Zavala]

The install file says:

Edit the php.ini file and make sure session.use_cookies is 1. Also
be sure to change the session.save_path to someplace that can only
be read and written to by the webserver. session.save_path is the
location that PHP's session data will be written to.

I created a folder, labeled phpsessions. I assigned apache as the owner and as the group. When I grant read and write permissions (chmod -R 600 phpsessions), Sm say that access has been denied to the folder. When I use chmod -R 700 phpsessions, SM works well.

Question: does the apache user need execution privileges? by using my permission set (700), am I risking a security breach?

_________________________________________________________________
Add photos to your messages with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail&xAPID=42&PS=47575&PI=7324&DI=7474&SU= http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_addphotos_3mf



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users